CVE-2019-17607

Name of the Vulnerable Software and Affected Versions HongCMS version 3.0.0

Description The issue is related to a security problem where an attacker can execute malicious scripts on the website. This is achieved by exploiting the servername parameter in the install/index.php endpoint.

Recommendations For HongCMS version 3.0.0, avoid using the servername parameter in the install/index.php endpoint until the issue is resolved. As a temporary workaround, consider restricting access to the install/index.php endpoint to minimize the risk of exploitation.